138 results · Feed
-
Unscored —
Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, i…
-
Unscored —
Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalatio…
-
Unscored —
Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local ac…
-
Unscored —
Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial o…
-
Unscored —
Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service v…
-
Unscored —
Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network …
-
Unscored —
Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron…
-
Low 3.7
Raccoon attack
The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman (DH) based ciphersuite. In such a case this would result in the attacker bein…
-
Unscored —
Bounds checking in Tianocompress before November 7, 2017 may allow an authenticated user to potentially enable an escal…
-
Unscored —
Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey
In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recover a CMS/PKCS7 transported encryption key or decrypt any RSA…
-
Unscored —
Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local a…
-
Unscored —
Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or eleva…
-
Unscored —
Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of pri…
-
High 8.7
Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privil…
-
Unscored —
Buffer overflow in network stack for EDK II may allow unprivileged user to potentially enable escalation of privilege a…
-
Unscored —
Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalat…
-
Unscored —
Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, i…
-
Unscored —
Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentiall…